Lucene search
K

4 matches found

CNNVD
CNNVD
added 2026/05/11 12:0 a.m.4 views

Pi-hole 安全漏洞

Pi-hole is a web-level advertising blocking application developed by Pi-hole Inc. Versions of Pi-hole from 6.0 to 6.4.2, as well as FTL 6.6.1, contained security vulnerabilities. These vulnerabilities stemmed from shell scripts that failed to validate the files.pid path read from configuration...

8.8CVSS5.8AI score0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/10 12:30 a.m.1 views

EUVD-2026-21120

OpenClaw through 2026.2.22 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files,...

7.1CVSS6.6AI score0.00143EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/04/09 9:27 p.m.2 views

CVE-2026-35632 OpenClaw <= 2026.2.22 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update

OpenClaw through 2026.2.22 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files,...

7.1CVSS6.5AI score0.00143EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.1 views

PT-2026-31767

Name of the Vulnerable Software and Affected Versions OpenClaw versions through 2026.2.22 Description OpenClaw through version 2026.2.22 has a symlink traversal issue in the agents.create and agents.update handlers. These handlers use fs.appendFile on IDENTITY.md without proper symlink containmen...

7.1CVSS6.5AI score0.00143EPSS
Exploits1References6
Rows per page
Query Builder